Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-04-2024 15:09

General

  • Target

    1760-0-0x00000000006D0000-0x0000000000B8C000-memory.exe

  • Size

    4.7MB

  • MD5

    48f2dac1db88f9fecc8346db84b982b0

  • SHA1

    a5178b8811901b44410e10f90d77f42729861a9f

  • SHA256

    03ae5e4a2bba9c238edf51d48256c0bbbec067afb75b4188e9d8e2e07025f311

  • SHA512

    59417adabae6556114a81d15cd2816678b0264f3276e8daee261f71c1ab882c778e475409863e289119bcef26f05956aacc0526ed620d87742a35aec491bdf4f

  • SSDEEP

    24576:Tl/6onZGvj9qZFQyLsxmk5VxsnGiClF2HFMOAyTC/5Gl/XlWRM0:TZ6oAj9EFKvxXFyRG/5E/XliM0

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1760-0-0x00000000006D0000-0x0000000000B8C000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1760-0-0x00000000006D0000-0x0000000000B8C000-memory.exe"
    1⤵
      PID:2072

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2072-0-0x00000000006D0000-0x0000000000B8C000-memory.dmp

      Filesize

      4.7MB